Privacy

LUME Network – Privacy Policy

Last updated: November 1, 2026

Who we are. LUME Network is run by its two founders, Lisa Mihelich and Brent Mercado ("LUME", "we", "us").

Overview

LUME Network is a mobile application that brings entertainment industry professionals together to collaborate authentically. By helping artists discover and connect with other artists they wouldn't normally meet, LUME enables the creation of powerful, authentic stories.

What we collect

• Sign-in. You sign in with Google, or with Apple on iPhone. Google shares your name, email address and profile picture with us. Apple shares the name and email address you choose to share (the email can be a private relay address from Apple's Hide My Email). We use these to sign you in. Your email address isn't on your profile and other members can't see it.
• Your profile. The name you go by, your roles, your city and your profile photo, plus anything else you add: a bio, union status, dates you're booked out, and links to your other pages.
• Your work. Photos, videos and links you add to your portfolio, with their titles and descriptions. Projects you post, with their photos, videos and roles. Applications you send, including any note.
• Messages. The messages you send and receive in LUME, and when you last read each conversation.
• Notifications. A code from your phone's notification service, so we can tell you when someone messages you. Each message notification carries the sender's name, the start of the message (up to 100 characters) and the web address of the sender's profile photo. It travels through Google's notification service (and Apple's, on iPhone), and the name and message can appear on your lock screen. Turning notifications off in your phone's settings stops them showing, but they're still sent through these services until the code is removed: we try to remove it when you sign out, and always remove it when you delete your account.
• Crash and error reports. When the app crashes or something fails, such as an upload, it sends a report to Firebase Crashlytics (Google): what went wrong and where in the app's code, technical details about your phone and the app (such as the phone model, system version and app version), and an ID for this installation of the app. We built the app to leave web addresses, email addresses and account IDs out of the reports our code writes, and we don't add your name or account to them. If a crash happens inside the phone's own system software, or inside a ready-made part the app is built with (such as the video player), Google's tool records that part's own error message, which we can't edit. A report may be sent later, the next time the app starts. Google starts deleting these reports after 90 days.
• Technical logs. Our servers keep logs to help us find and fix problems. They can include your account's ID number, your IP address, the kind of device and app version making the request, and the web addresses of your files. Our server logs are kept for about 30 days. We also keep a short record of the times of your recent uploads and city searches, to stop misuse.
• City search. When you type your city, what you type goes through our server to Google's Places service, which suggests matching cities. Your profile keeps only the city you pick. The app never asks for your phone's location.
• What we don't do. LUME has no ads, no ad tracking and no analytics tools, and we never sell your information.

How we use your information

• To create and maintain your account
• To show your profile, your work and your projects to other members
• To facilitate connections between professionals, including messages and project applications
• To remove hidden details from your photos and videos (see below)
• To send you notifications about new messages
• To keep the app stable and fix problems

Photos and videos

Phones can store hidden details inside photos and videos: where they were taken, when, and on what device. That's not something you meant to share, so LUME removes them.

• Photos. Before a photo leaves your phone, the LUME app removes its hidden details: the location, the date and time it was taken, the phone or camera model, and any other notes stored in the file. It keeps the picture itself, its colours, which way up it goes and, in JPEG photos, an artist name and copyright notice if the photo carries them. The cover picture for a video is treated the same way.
  • In the rare case the app can't read a photo's file at all, it uploads the photo unchanged, hidden details and location included, and shows it like any other photo.
• Videos. The LUME app can't do this on your phone, so our servers do it.
  • A new video goes first into private storage that has no public address, exactly as you uploaded it, location and all.
  • Our servers make a copy with all hidden details removed (location, times, device, and any name or credit an editing app wrote into the file). They check that nothing was left and that the picture and sound are untouched, and only then publish it.
  • Until then, LUME shows "This video isn't ready to play yet". This usually takes a few minutes.
  • If you upload a video but don't finish posting it, it's erased about a month later.
• If our servers can't check a video, it stays private and isn't shown, and we'll get in touch with you. It stays in private storage as you uploaded it until it's cleaned, or until you delete it or your account. We never publish a video we couldn't check.
• Your original video. After the cleaned copy is published, we keep your original video in private storage, with its location and other details, until you delete that video or your account. It isn't shown in LUME and has no public address.
• Public addresses. Every photo and video shown in LUME has its own web address. The address is long and hard to guess, and it can include your account's ID number and when you uploaded the file. Anyone who has the address can open the file without signing in to LUME.

Who can see what

• Anyone who has the address: the photos and videos you post, including your profile photo.
• Anyone signed in to LUME: your profile, your portfolio, and every project with its photos, videos and roles, including who has filled each role.
• Copies other members keep: when someone saves your profile, their saved list keeps a copy of your name, roles, city and the address of your profile photo, as they were when they saved you. Each conversation keeps each person's LUME name, and the profile photo address they had when it began.
• Only you and the project's owner: an application you send, and its note.
• Only you and the other person: your conversations.
• Only you: your saved lists and your notification codes.
• Us: The two of us who run LUME can technically see what's stored, including messages. We only look when we need to keep LUME working and safe, or when the law requires it.

Who helps us run LUME

• Google (Firebase and Google Cloud): sign-in, our database (profiles, projects, messages), our server code, the video cleaning, notifications, crash and error reports, and city search.
• Apple: Sign in with Apple, and notifications on iPhone.
• Cloudflare: storage for photos and videos (a public space and a private one).
• Anthropic: Claude, an AI that helps us build and run the company (see AI below).
• Everything travels over encrypted connections (HTTPS).

If you're testing LUME

• On iPhone (TestFlight): Apple shares with us the email address you were invited with and the name we entered for you (not if you joined through a public link), your device model and an identifier for it, its system version and language, the app version you have, how many times you've installed and used it, crash logs, and any feedback and screenshots you send through TestFlight, with technical details such as your carrier, time zone and battery level. Apple's TestFlight privacy notice explains more.
• On Android (Google Play): we add the Google account email address you give us to Google Play's tester list, so you can install LUME.

Deleting things

• A photo or video (in your portfolio or a project). When you delete one, it normally stops being viewable right away: its address stops working for everyone. We move a copy to a new secret address that is never shown or shared (a video's original stays in private storage), keep it for about 30 days in case something went wrong, and then it's erased automatically. If that first step fails, our system is set to try again within about half an hour and to alert us.
• A project. You can close a project but not delete it. A closed project leaves the Projects list but stays stored, with its roles and who filled them, and members who saved it or applied to it can still open it. Its photos and videos can be deleted as above. Deleting your account deletes your projects. You can withdraw an application only before the project's owner answers it.
• Files kept while your account exists. A profile photo you replaced, and a photo or video cover whose upload finished but was never saved (for example, if the connection dropped), aren't deleted and stay at their addresses while your account exists. When you delete your account, they're erased with it.
• Your account. You can delete your account in the app: Profile → Settings → Delete Account. You'll be asked to sign in again first, with Google or Apple. This deletes your profile, your portfolio, your projects (with their photos and videos), the applications you sent and the ones sent to your projects, your saved lists, your notification codes and your sign-in record, and takes you off any project role you'd filled. If any of your files can't be erased, the deletion stops partway and asks you to try again; your account stays until a later try succeeds. If you signed in with Apple, LUME stays listed in your Apple ID's "Sign in with Apple" settings. If you signed in with Google, it stays listed among your Google Account's linked apps. You can remove it from either.
• What's kept after you delete your account.
  • We erase all your photos and videos straight away, with no 30-day copy, except in three narrow cases:
    • a video that was being cleaned at that moment may briefly appear at its address, and then a private copy is kept until it's erased within about 30 days;
    • a photo or video still being uploaded when you delete your account (for example, from another phone) may not be erased, and a photo stays at its web address;
    • photos or videos you deleted shortly before deleting your account keep their 30-day copy until it runs out.
  • Copies other members keep (saved lists and conversations, above) stay, with your name. Your photo in them stops loading, because the photo itself is erased.
  • Technical logs, crash and error reports, and the record of your recent uploads and searches aren't removed when you delete your account. Our server logs are kept for about 30 days. Google starts deleting crash and error reports after 90 days. The record of your uploads and searches holds only the times from the last minute in which you uploaded or searched, and it isn't deleted.
  • Google erases deleted sign-in records from its backups within 180 days.
  • Some of what the app showed you can stay in its storage on your phone until you remove the app.
• Messages you sent stay. They stay in the other person's conversation, under the name you had. Messages can't be edited or deleted after they're sent. A deleted account can't start a new conversation.
• If you can't use the app, email privacy@lumenetwork.com and we'll delete your account for you.

AI

LUME's own app and server code contain no AI, and they never use AI on your work, your messages or your profile. The tools that remove hidden details from your files are ordinary programs that follow fixed rules.

LUME the company is built and run with help from Claude, an AI made by Anthropic. To fix a problem, one of us may use Claude to look at stored information, for example the technical structure of a video that couldn't be cleaned. Claude never decides anything about you or your work. We never use what you share on LUME to train AI, and we never sell it or give it to anyone to train AI.

Age

LUME is for people 18 and over.

Changes to this policy

When we change this policy, we'll update the date at the top and tell you in the notes for the next update.

Contact

For privacy questions, email us at privacy@lumenetwork.com.

This website

This part explains what the LUME Network website keeps about you, who can see it, and how to change or remove it. Unless you sign the casting call sheet, we don't ask for or keep anything about you. The one exception is the basic record of each visit that our web host keeps, described below.

When you sign the casting call sheet

When you sign the casting call sheet, we keep your name, your email, what you ticked (news about LUME, testing the app, iPhone or Android) and the date.

The sheet runs on Google in LUME's Google account, so Google also sees your internet address and which browser you use. Only Lisa and Brent can open the list.

We use it only for what you ticked. If you asked to test the app, we give the email you test with to Apple or Google so they can send you the invitation. We don't sell your details or share them with anyone else.

We keep them until you ask us to take you off. To see, change or remove your details, email privacy@lumenetwork.com.

Settings saved on your device

The site remembers two small settings in your browser: whether you chose the plain page, and whether you've already seen the lights come on. They stay on your device and are never sent to us. Clearing this site's data in your browser removes them.

No ads, analytics or cookies

The site has no ads, no analytics and no cookies. Its fonts, pictures and videos all come from the site itself, so the only company involved in an ordinary visit is our web host.

Do Not Track

Some browsers can send a Do Not Track signal. We don't follow what you do over time or across other websites, and no other company does so through this site, so the signal has nothing to switch off here.

Our web host

The site is served by Cloudflare. Like any web host, its servers receive your internet address, which browser you use and the page you asked for, so they can send you the page. Cloudflare handles this for us. Cloudflare doesn't say how long it keeps these records.

Instagram

The site links to our Instagram, @lumenetwork. Once you're on Instagram, Instagram's own privacy policy applies.

When this page changes

When this page changes, the date at the top changes too. If a change affects how we use your email, we'll email everyone on the list before it takes effect.

Questions

Email privacy@lumenetwork.com.